CVE-2020-0250: Missing Authorization

In requestCellInfoUpdateInternal of PhoneInterfaceManager.java, there is a missing permission check. This could lead to local information disclosure of location data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

PT-2020-11605

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing permission check in the requestCellInfoUpdateInternal function of PhoneInterfaceManager.java. This could lead to local information disclosure of location data with no...